GitHub Advisoryadvisory · Maven

GHSA-v7cq-pq7v-mh5v Apache Derby SQL Injection

MEDIUM Published 2022-05-01 Modified 2024-02-12 Official page ↗
Aliases
CVE-2006-7217
Ecosystem
Maven
Packages
org.apache.derby:derby
Severity
Moderate
Weaknesses
CWE-89
Reviewed
2024-02-12

Affected packages

• Maven org.apache.derby:derby: < 10.2.1.6 → fixed in 10.2.1.6

Description

Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode.

Related

Alias · CVE (1)

  • CVE-2006-7217 Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote… vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References